Skip to content
NewA calmer, faster ZeroHour
StoryAdvisoryhighExploited in the wild

Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026

1 source · 15 articlesFirst reported Updated ()2
Merged summary · from the lead articleSummaries by Vani AI

Cisco's September 2026 firewall hardening release fixes internally found ASA, FTD, and FMC flaws, two of which are actively exploited.

Cisco released September 2026 hardening updates for Secure Firewall ASA, FTD, and FMC software addressing multiple vulnerabilities discovered during a comprehensive internal security review. Two of the vulnerabilities are known to be actively exploited, including a Cisco Secure Firewall Management Center static credential vulnerability. Details are provided in separate linked advisories.

Key facts
  • Hardening releases for ASA, FTD, and FMC from internal security review
  • Two vulnerabilities actively exploited in the wild
  • Includes Secure Firewall Management Center static credential fix
  • Full details in separate linked Cisco advisories
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Vendors
Cisco
Products
Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Secure Firewall Management CenterCisco Secure Firewall Management Center (FMC)Cisco Secure Firewall ASACisco Secure Firewall Threat Defense (FTD)Adaptive Security ApplianceSecure Firewall Threat DefenseASAvFTDvCisco ASACisco Secure Firewall 3100 Series
Organizations
Cisco

Coverage

oldest first · one row per article · UTC
  1. · Sep 16, 2026 Cisco Security AdvisoriesFirst report

    Cisco Secure Firewall Management Center Software Vulnerabilities

    Cisco Secure Firewall Management Center vulnerabilities could let remote attackers gain root access and perform session forgery or impersonation.

  2. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability

    Cisco patched an sftunnel flaw in Secure Firewall Management Center letting an authenticated remote attacker execute arbitrary commands as root.

  3. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability

    Cisco patched a DTLS flaw in ASA and FTD software for Secure Firewall 3100/4200 series letting unauthenticated attackers trigger device reloads.

  4. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability

    A TLS 1.3 buffer management flaw in Cisco Secure Firewall Threat Defense lets remote attackers crash the LINA process and reload devices.

  5. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

    Cisco patched an ASA/FTD IKEv2 certificate authentication flaw letting unauthenticated remote attackers crash the IKEv2 process and reload devices with crafted certificates.

  6. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

    Cisco patched an ASA/FTD rate-limiting flaw where TCP SYN floods trigger excessive syslog 419002 messages, causing high CPU and degraded performance.

  7. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities

    Cisco patched ACL Object Group Search bypass flaws in ASA and FTD firewall software that let unauthenticated attackers reach protected networks.

  8. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

    Cisco fixed an EIGRP flaw in Secure Firewall ASA/FTD software letting unauthenticated adjacent attackers trigger memory leaks and unexpected device reloads.

  9. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

    Cisco disclosed a TCP DNS flaw in ASA and FTD firewall software letting unauthenticated remote attackers trigger device reloads and denial of service.

  10. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability

    Cisco fixed an SSL certificate parsing flaw in FTD's Snort 2 engine letting unauthenticated remote attackers force detection engine restarts.

  11. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

    Cisco fixed an unauthenticated Java deserialization RCE in FMC's External Database Access feature allowing root command execution via a TCP port.

  12. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities

    Cisco fixed sftunnel flaws in Secure Firewall Management Center and Threat Defense allowing unauthenticated authentication bypass or denial of service.

  13. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026

    Cisco's September 2026 firewall hardening release fixes internally found ASA, FTD, and FMC flaws, two of which are actively exploited.

  14. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Management Center Software Vulnerabilities

    Cisco fixed multiple Secure Firewall Management Center flaws enabling remote attackers to gain root access, download files, inject SQL, or cause DoS.

  15. · Sep 16, 2026 Cisco Security Advisories

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability

    Cisco expanded an SSL VPN denial-of-service advisory to cover all ASA and FTD software platforms; unauthenticated attackers can exhaust device memory.